Can't setup filebeat

Elastic Stack Beats
1

Can anyone help me? I've an elk intance, it's working well, but when I try to setup a new filebeat in another instance it throws me the following:
image

I read that I could remove the filebeat index and then it would work fine.
I'm new to elk, so I don't know if that would delete some important info. I have the version 7.9.3 and the filebeat.yml has the default configuration, I just added the cloud.id and cloud.auth for it to work. I've to do this for some linux instances.

2

So yes, you would need to remove the existing index so the alias can be made OR use a different index alias. You would only lose info if the index has data in it and is being used. You could create a new index and reindex the existing data if needed

1 Like
3

Thank you

how can I use a different index alias? I seached in the filebeat.yml and there wasn't related to alias

4

see Configure index lifecycle management | Filebeat Reference [7.12] | Elastic for the ILM roll over alias setting

1 Like
5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.